CVE-2024-7344

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

CVSS v3.1

8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS v3.1

8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

1.04% chance of exploitation in the next 30 days, 62th percentile

Published

2025-01-14

Updated

2025-09-15

Proof-of-concept exploits (2)

• https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-…
• TheMalwareGuardian/CVE-2024-7344

References

• CVE Record
• NVD entry

Related

• CVE-2002-1120
• CVE-2003-0264
• CVE-2007-1567
• CVE-2017-14980
• CVE-2018-18912
• CVE-2020-13768